Data subject access to personal data (Principle 6)

3.8.1 General guidance on dealing with subject access requests is set out at 2.7 above. Records Managers should ensure that the retrieval of manual and electronic records creates an audit trail. Finding aids must be effective to retrieve personal data quickly and accurately. The data controller should verify and authorise

action on all data subject access requests.

3.8.2 The Act provides no rights of access for third parties. Guidance on the circumstances in which third party access can be provided is at 4.9 ….

=====================================================================================

Code of Professional Practice for Library and Information Professionals. – Availble at: http://www.cilip.org.uk/policyadvocacy/ethics/code

This Code applies the ethical principles to the different groups and interests to which CILIP members must relate. The Code also makes some additional points with regard to professional behaviour. The principles and values will differ in their relative importance according to context.

A.Personal Responsibilities

People who work in the information profession have personal responsibilities which go beyond those immediately implied by their contract with their employers or clients. Members should therefore:

1 strive to attain the highest personal standard of professional knowledge and competence

2 ensure they are competent in those branches of professional practice in which qualifications and/or experience entitle them to engage by keeping abreast of developments in their areas of expertise

3 claim expertise in areas of library and information work or in other disciplines only where their skills and knowledge are adequate

B.Responsibilities to Information and its Users

The behaviour of professionals who work with information should be guided by a regard for the interests and needs of information users. People working in the information profession also need to be conscious that they have responsibility for a growing heritage of information and data, irrespective of format. This includes works of the imagination as well as factual data. Members should therefore:

1 ensure that information users are aware of the scope and remit of the service being provided

2 make the process of providing information, and the standards and procedures governing that process, as clear and open as possible

3 avoid inappropriate bias or value judgements in the provision of services

4 protect the confidentiality of all matters relating to information users, including their enquiries, any services to be provided, and any aspects of the users' personal circumstances or business

5 deal fairly with the competing needs of information users, and resolve conflicting priorities with due regard for the urgency and importance of the matters being considered

6 deal promptly and fairly with any complaints from information users, and keep them informed about progress in the handling of their complaints

7 ensure that the information systems and services for which they are responsible are the most effective, within the resources available, in meeting the needs of users

8 ensure that the materials to which they provide access are those which are most appropriate to the needs of legitimate users of the service

9 defend the legitimate needs and interests of information users, while upholding the moral and legal rights of the creators and distributors of intellectual property

10 respect the integrity of information sources, and cite sources used, as appropriate

11 show an appropriate concern for the future information needs of society through the long term preservation and conservation of materials as required, as well as an understanding of proper records management

Date: 2015-12-24; view: 596